Static task
static1
Behavioral task
behavioral1
Sample
441d21e6c2fdb5e736c14a04cafa19e5c3cd1cfcdf9276d1612f92c719bbc20b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
441d21e6c2fdb5e736c14a04cafa19e5c3cd1cfcdf9276d1612f92c719bbc20b.exe
Resource
win10v2004-20220812-en
General
-
Target
441d21e6c2fdb5e736c14a04cafa19e5c3cd1cfcdf9276d1612f92c719bbc20b
-
Size
747KB
-
MD5
ab8b94d2c7581060c3c9a072158a137b
-
SHA1
b1569e53ec24e2ef1863c4dd896f41068f6c5fd7
-
SHA256
441d21e6c2fdb5e736c14a04cafa19e5c3cd1cfcdf9276d1612f92c719bbc20b
-
SHA512
72a2639f83be26bceeb6f478971610a441ec62fe6ba1bfb291bc7287e392ff5c5c3ba04f0a2c24a59da75303541cabf0992b112a781bb4c06765806e248facc9
-
SSDEEP
12288:G134RljI1eBgnrsUxvSDuugEI5kaCCwUBAevkQs3D968yn2Pt1hjnGkmsUlHfYHn:GYljPCrsUxaD3WpChecQeZptzjn+XlHj
Malware Config
Signatures
Files
-
441d21e6c2fdb5e736c14a04cafa19e5c3cd1cfcdf9276d1612f92c719bbc20b.exe windows x86
3217239090fa98a5becda048050f3eb5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableW
VirtualAllocEx
RemoveDirectoryA
ResetEvent
WriteConsoleW
HeapSize
ExitProcess
GetModuleHandleA
GetTickCount
CancelIo
SetLastError
OpenProcess
GetFileAttributesA
GetStartupInfoW
SetEvent
CreateFileA
GetCommandLineW
ReleaseMutex
DeleteFileW
CreateMutexA
ClearCommBreak
user32
GetSysColor
FindWindowA
PeekMessageA
DispatchMessageW
DispatchMessageW
GetDC
CallWindowProcW
GetWindowLongA
GetCursorInfo
GetDC
GetDC
FillRect
GetClassInfoA
lpk
LpkExtTextOut
LpkExtTextOut
LpkExtTextOut
LpkExtTextOut
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 741KB - Virtual size: 740KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ